22 Creating Policies and Managing Policy Alerts

Create custom policies for alerts to supplement the predefined policies provided with each application that you add.

A policy is a rule or a guideline, such as, "only people in Finance can view files in the Finance folder" or "any change to network access rules must be reviewed." You can define policies based on particular cloud services, resources in the service, actions on the resource, and optionally items such as actors, recipients, whole groups of users, domains, and IP addresses. In Oracle CASB Cloud Service, you define policies based on:

  • Particular cloud services, such as Box, GitHub, or ServiceNow

  • Particular resources in the service, such as a file or folder, or any resource in the service

  • Particular actions on the resource or resources, such as share, download, or collaborate

  • Optionally, items such as actors, recipients, whole groups of users, domains, and IP addresses

Oracle CASB Cloud Service generates an alert whenever an event that matches the policy occurs. The console displays a description of the policy violation and can provide recommendations for responding to it. You can also configure the alert to be sent to you over email or SMS.